MAL-2025-190004 Malicious code in troposphere-comet-changelog-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b74ff548784ce3a86f53316b5de4200f29c883e33f658fd92f1e8e6322c765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186191 Malicious code in cluster-wind-decode-sigma-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89e6d425ea10a6bbc7c23e11410d5d33053239f7ec72033f36de7f54628073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-decrypt-async-public-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b85be1c1821e69911d086ceb1086440095d3c75414a4be0d017c6474f0df12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lambda-daemon-cron-delta-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fb54f754c0ebae3c47333aeee6383f8571f97acc80cc251881087f1353d280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmochemistry-less-enceladus-eigenstate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65cf885eb0da593f6adfe75d1539a0790e95b46c28f22988b577a13ef6c3b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-bootes-resonance-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8b4773259d5547357d870a866f9e7006b8eb86df99ec58fbc123d7da10ffd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-visagoii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8664034e3f130fe849ebca9d987778f514cdca4ba5cc926389d022b5dc50db64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodij-agafba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707cd2889a6ff6dc2b6b369711ddb27dfb0a5ba31b374737145d28723293b529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswasdweaddeassaedaeaefedeadedefredasfgeaffaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9e791a106d60102440cd74d645256df58aadad7c030a275d4d9b33d6e30729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rryusyfsufytftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abdca089e375df5b932abdbff741da21b183e365c98f33dbce04dfd0f1794e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dacad449794653a0b5a1fa80aea72047b558cceb5e827894de17bf5ef0bda21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181871 Malicious code in avangs-olium-nolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180168e59d0ed38e42c9c18b878dec2a13d32d1455d4561fd54415ed23317b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182832 Malicious code in itale-adci-ggmatondanggangtengdydjdru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe852e9e590e3de48b8b49c8a1468f72f9f9e31a8f30552f9aa689b7ea09341e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182126 Malicious code in gociay-uga-aggrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d934b529a34fab097759ca2edca5718a4a269e985d3338c92d84fe51d01b8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181212 Malicious code in @akunsansan0/biru26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7365f33105c059fc33cbdcc40abef957d9d76ae3a816bd6b3b3bb0abd46a241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179489 Malicious code in anabuyil-n10n-nii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4554937ed128e8b808862b0913cc8e0c32568104cf416b3a6153cd390d6088c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180966 Malicious code in teate-thy-sonic-tigci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79983155224a7f853c4ac86b3f52f3fbc9b2532a311c24e2eca0daf03d7cf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jeje21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbcacec204f68acb365b423c6b2e6c9b5bff3e3733f720b55a6cc80be75401e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-nn-nii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1dc5708771ae8d310499697c62eb65a33fb43320bec846e1b7d1ca13b27948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-madivnv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dc2954d43700b6361cd2cd59b027b9a7fec4d2761e43eac4a96e5c0fda3a803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...